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Question: 1 


How are authentication credentials sent in a Cisco APIC REST API authorization request? 


A. by using OAuth 

B. in a token in the header 
C. by using Basic Auth 

D. in JSON in the payload 


Answer: D 


Explanation: 

http://www.cisco.com/c/en/HYPERLINK 
"http://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1- 

x/api/rest/b APIC_ RESTful API User Guide/b IFC RESTful API User Guide chapter _0100"u 
s/td/docs/switches/datacenter/aci/apic/sw/1- 

x/api/rest/b APIC_ RESTful API User Guide/b IFC RESTful API User Guide chapter 0100 


Authentication to the REST API for username/password-based authentication uses a special subset of 
request URIs, including aaaLogin, aaaLogout and aaaRefresh as the Dn target of a POST operation. 
Their payloads contain a simple XML or JSON payload containing the MO representation of an 
aaaUser object with attributes name and pwd defining the username and password, for example: 
<aaaUser name=’admin’ pwd=’insieme’/>. The response to the POSTs will contain an authentication 
token as both a Set-Cookie header as well as an attribute to the aaaLogin object in the response 
named token, for which the XPath is /imdata/aaaLogin/@token if encoded as XML. Subsequent 
operations on the REST API can use this token value as a Cookie named “APIC-cookie” to have future 
requests authenticated. 

Reference: 

http://aci-troubleshooting-book.readthedocs.io/en/latest/rest 


Question: 2 


Which two statements about OpenFlow are true? (Choose two.) 


A. The OpenFlow flow table contains header fields, counters, and actions. 
B. OpenFlow automatically determines network forwarding rules. 

C. OpenFlow interfaces with the management plane. 

D. OpenFlow is a southbound protocol. 

E. OpenFlow is an agentless technology, like Ansible. 

F. OpenFlow is a northbound protocol. 
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Answer: AD 


Explanation: 
Reference: 


For A, http://archive.openflow.org/documents/openflow-spec-v1.0.0.pdf 
For D, https://learninglabs.cisco.com/lab/restconf-101/step/3 


Reference: 
http://archive.openflow.org/documents/openflow-spec-v1.0.0.pdf 


Question: 3 


Where is the node-ui.log stored on the Cisco APIC-EM appliance? 


A. in the /var/log/grapevine/services/node-ui directory within the container that is running the 
node-ui instance 

B. in the Cassandra database instance that is running within the container that is running the node-ui 
instance 

C. in the /opt/CSCOapicem/logs/node-ui directory within the Cisco APIC-EM appliance root 

D. in the /var/log/grapevine/services/node-ui directory within the Cisco APIC-EM appliance root 

E. in the Cisco APIC-EM Cassandra database instance 


Answer: D 


Question: 4 


DRAG DROP 
Drag and drop the technology on the left to its appropriate use case on the right. 
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Answer: 


my 
A 
. 


Question: 5 


Which network configuration protocol uses JSON as a data representation format? 
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A. NETCONE 
B. SOAP 
C. RESTCONF 
D. HTML 


Answer: C 


Explanation: 


JSON-RPC is an RPC protocol built on JSON, as a replacement for XML-RPC or SOAP. It is a simple 
protocol that defines only a handful of data types and commands. JSON-RPC lets a system send 


notifications (information to the server that does not require a response) and multiple calls to the 
server that can be answered out of order. Example of a JSON-RPC 2.0 request and response using 
positional parameters. 
Reference: 

tools.ietf.org/html/draft-ietf-netconf-restconf-13#section-1.1.1 5.3.2 
https://tools.ietf.org/html/draft-box-http-soap-00 XML payload format in SOAP 


Question: 6 


Which two statements about the NX-API are true? (Choose two.) 


A. NX-API supports XML-RPC 

B. NX-API is enabled by default 

C. NX-API supports JSON-RPC. 

D. The nxapi_auth cookie expires in 30 minutes. 
E. NX-API maps to NX-OS NETCONF. 


Answer: AC 


Explanation: 


NX-API is an enhancement to the Cisco Nexus 9000 Series CLI system, which supports XML output. 
NX- 

API also supports JSON output format for specific commands. 

Reference: http://www.cisco.com/c/HYPERLINK 
"http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus7000/sw/programmability/guid 


e/b Cisco Nexus 7000 Series NX-OS Programmability Guide/b Cisco Nexus 7000 Series NX- 


OS Programmability Guide chapter 0101"en/us/td/docs/switches/datacenter/nexus7000/sw 


[/programmability/guide/b Cisco Nexus 7000 Series NX- 
OS Programmability Guide/b Cisco Nexus 7000 Series NX- 


OS Programmability Guide chapter 0101 


Question: 7 


Which two statements about YANG are true? (Choose two.) 
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A. YANG was conceptualized by Jerry Yang, former CEO of Yahoo. 

B. YANG provides security beyond SSL 3.0. 

C. YANG can be executed similarly to a Python script. 

D. YANG is used by NETCONF to define objects and data in requests and replies. 
E. YANG represents configuration, operational, and RPC data. 


Answer: DE 


Explanation: 

http://www.cisco.com/c/dam/global/cs_cz/asHYPERLINK 
"http://www.cisco.com/c/dam/global/cs_cz/assets/ciscoconnect/2014/assets/tech_sdn10 sp netco 
nf_yang_restconf_martinkramolis.pdf"sets/ciscoconnect/2014/assets/tech_sdn10 sp netconf_yan 


restconf_martinkramolis.pdf 


Question: 8 


Which computer security concept is violated when a web server is written that uses the "root" 
account for all Interactions with a Linux system? 


A. RBAC 

B. PermitRootLogin 

C. certificate-based authentication 
D. principle of least privilege 


Answer: A 


Question: 9 


An organization leverages a multivendor network to sell connectivity services using Layer 3 VPN and 
VPLS. Where possible, the organization wants to use common APIs across vendors, in order to 
automate the configuration of network services. Which technology should the organization consider 
for the southbound interface? 


A. BGP-LS 

B. OpFlex 

C. OpenFlow 
D. NETCONF 
E. PCEP 


Answer: D 


Question: 10 
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Which statement is used to associate a submodule and a parent module in a YANG data model? 


A. import 
B. namespace 
C. include 
D. belongs-to 


Answer: C 


Explanation: 
The "include" statement is used to make content from a submodule available to that submodule's 


parent module, or to another submodule of that parent module. 
Reference: https://tools.ietf.org/html/rfc6020 
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